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Secure Digital to Analog Converter (1-229) 

Inventors: Eli Hibshooeh of Tel-Aviv, Israel, and Chaim D. Shcn-Orr of Haifa, Israel. 
Data: March 24 2000 

Background 

Digital Copy Protection implies an ability to control recording (prevent un a utho ri zptri copying) of 
any cloar- decrypted- digital signal Often the "clear** digital signal is converted CO analog form 
without adequate p r o te c tion as explained below. 

Various methods maybe used to encrypt the digital music content, ensuring that all decrypted 
(clear) signals are handled internally to the player device. However, technological advances 
available to copyright violators (hackers) make it imperative to avoid having clear digital content 
on any lines that go out of a secure piece of silicon. 

The current main obstacle to achieving this goal stems from the current state of technology: High 
quality music reproduction, for example, requires at least 24-bit resolution Digital to Analog 
Converters (DACs). Real-time decryption and decoding of encrypted compressed music files 
requires high processing power CPU (Decryption / Decompression Engine - DDE). Placing the 
two together on a single piece of silicon results in coupling DDE electrical noise into Che DAC 
analog output to a degree that results in unacceptable audio quality. 

For this reason, all high-quality DACs are built into chips (integrated circuits) that are physically 
separate from the high-speed CPU's. The result is that lines from DDE's to DACs carry clear 
digital content data, e.g., corresponding to the audio. Thai point can bo ^tariffed" to extract the 
dear digital data. 

The present invention is intended to circumvent the technology barrier described and create a 
Secure Digital to Analog Converter (SDAC). With such a device, any "sniffing" of the digital 
line / lines between the two components will yield commercially unusable noise or severely 
distorted signal. 


Digital to Analog Converter background. 

One form of conventional DAC (four-bit in fig. 1) is made out of resistors and resistor ladder 
elements (branches), to each of which a reference voltage is applied through an electronic switch. 
Each branch output voltage is zero if the corresponding switch is open, and a certain (fixed) 
value in case his closed. These voltages are summed in an amplifier to produce the DAC output 
voltage. 

A DAC also includes a digital interface - parallel or serial, in any of several standard formats - 
that accepts digital values to be converted. An input digital value is defined by a number of 
binary digits (hits), each of which may be either "0" or "1". The input interface electronics 
directs each of these bits to the appropriate switch. 

The resistors are adjusted so thai each branch produces a binary-weighted voltage value 
corresponding to the binary position of the bit thai actuates the branch's switch. Thus the sum of 
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these voltages seen at the output amplifier is equal to a reference voltage times the input digital 
value. 

Conventionally, the relative '•weights" of the various bits (Le. switch/ resistors combination) of a 
DAC correspond to integral powers of two. That makes the output voltage value correspond 
exactly to the input binary word, except for the effects of (unwanted) non-linearities, noise and 
other undesirable effects. Thus, the ideal analog output voltage value corresponding to a N-bit 
digital input X is Vref»£ {2 4 *Xt} , where i is the position of binary digit within the input 
word (from 1 to N), XI is the value of the i-th binary digit (0 or 1), and Vref is the DAC 
reference voltage. This input/output relationship is known, linear and constant. 

Non-linear DACs exist for special applications such as extending the output range without loss 
of resolution over a limited sub-range. In such DACs the relationship between the digital input 
- word and the voltage output follows a non-linear function, but that function is known and 
constant, and in line with required accuracy. 

Another conventional DAC form is the ''one-bit" DAC, or more accurately "delta^sigrna 
modulator with one bit DAC", which produces an analog voltage value by generating a high- 
frequency waveform whose instantaneous values are either of two known fixed numbers. These 
numbers ("step-up" and "step down"), are conveniently designated "0" and "I 1 *, but quite often 
are opposite-polarity, equal-amplitude values. The waveform averages, through a suitable filter, 
to the required instantaneous voltage. 

To reduce DAC output noise it is important to keep the number of high-speed switches within 
the converter chip to a minimum, and have the necessary switching done in a synchronous 
manner. Similar considerations apply when the digital input to the DAC chip is serial rather than 
the parallel scheme just described. 

Description of the invention. 

The present invention attempts to create a Secure Digital to Analog Converter (SDAQ by 
combining three different ideas, none of them having been applied to this field before: 

1. Implementing a CPU / crypto engine ("DACC") in the DAC chip and using it in low speed 
(or not at all) during the digital to analog conversion. CPU-related noise effects on DAC 
performance are therefore eliminated. 

2. Constructing the DAC itself so that its input-output transfer function is settable by the 
DACC The settings are so designed that mere is no (or minimal) asynchronous switching 
during use. The variety of settings is such that it would be extremely difficult to extract the 
original (binary-weighted) digital word corresponding to an output voltage, given a limited 
number of observed SDAC digital inputs and analog output voltage measurement. 

3. Establishing a "secure authenticated channel" between the DACC and tile DDE by 
cryptographic means, during a short "setup session** at the beginning of a playout period 
(Figure 3). No content is played daring the setup session, so the DACC can be in mil 
operation and negotiate the transfer function parameters for the upcoming playout period 


without any noise effect on the DAC when it is performing its main function of digital to 
analog conversion. Conversely, full-speed DACC operation is not required during the 
playout period, per (2) above. 

Note that the secure authenticated channel and the digital signal channel (shown separately in 
Figure 3) may actually share the same physical lines. 


Pi efejie d embodiments 

Starting with a setup session, a secure channel is established by any common cryptographic 
means, such as those used to communicate between any two secure devices. TypicaJly, the 
channel will be Initiated by the DDE. 

Once a secure channel is established, the DACC will propose a randomly selected set of SDAC 
parameters. Once accepted, both sides will use the same set to achieve an overall linear transfer 
function. 

On the source side (the DDE), these parameters will be used to modify the binary words 
transmitted to the SDAC for playout The modification may be carried either in the DDE 
software (DAC driver) or in special-purpose hardware, ox a combination of both. 
On the receiving side (the SDAC), the DACC sets registers to control DAC operation, and than 
effectively shuts itself off. Alternatively, it may go into a reduced mode of operation so that its 
spurious (noise) effects on the DAC are within acceptable limits. 

The DAC Control registers may affect DAC operation in any of the following, combinations, and 
variations: 

A - Shuffle the bit order of the input word. For a 24-bit DAC, the number of combinations is on 
the order of ICr. 

B. Use non-binary weighted resistor values (Kg. 2) to create non-linear converter bit "weights". 
Jt should be noted that since the binary weight scheme is the most efficient, the number of 
bits in the non-binary-weighted converter must be increased to cover the same range, At the 
same time, rather small deviations from correct binary weights (due to resistor R2 in the 
example given) may cause enough distortion to make the content commercially unusable. 
Small deviations lead to a small number of additional bits required, and minimize 
requirements on deviation resistor / switch. 

C Use simple cryptographic functions mat may be achieved by any number of means that do not 
impose excessive noise on the analog output. For example - XOR with the output of a 
Linear Feedback Shift Register. 


Note that the invention is described in terms of a parallel DAC architecture. However, the same 
principle can be applied to any other DAC type. In particular, application of (B) to a one-bit 
DAC may be achieved by using unequal step-up and the step-down voltages. 
Also, ancillary functions like calibration, control, inter-chip bus structure and standards, 
unprotected operation modes, and handling element inaccuracy have not been described. 
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